$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json) Hash identifier: II/51M6ASvJ32+FWFFt6WK3cOjH8DiSd7mmA6NV7dOU= Subject key identifier: 8D:83:F0:BF:64:7C:A4:74:33:43:53:09:AA:7B:DE:38:72:4B:7B:5A Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Certificate serial: 019873E24022343B86AA1FEDDBD0B9B263E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft Manifest number: 0970 Signing time: Mon 04 Aug 2025 07:01:03 +0000 Manifest this update: Mon 04 Aug 2025 07:01:03 +0000 Manifest next update: Tue 05 Aug 2025 07:01:03 +0000 Files and hashes: 1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=) 2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=) 3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=) 4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=) 5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=) 6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=) 7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=) 8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=) 9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=) 10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=) 11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=) 12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: JThDjb/fk1JmdDXKorFyhiFED/Wbh8oa/lur2D94Uhg=) 13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=) 14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=) 15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=) 16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=) 17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=) 18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=) 19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=) 20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=) 21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 05 Aug 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:73:e2:40:22:34:3b:86:aa:1f:ed:db:d0:b9:b2:63:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384 Validity Not Before: Aug 4 07:01:03 2025 GMT Not After : Aug 5 07:01:03 2025 GMT Subject: CN=8d83f0bf647ca47433435309aa7bde38724b7b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:65:6c:a9:76:f4:94:51:fb:39:3e:ea:47: 15:89:06:36:84:4a:d9:25:34:96:08:87:18:fc:87: 32:4e:af:10:1e:09:e1:5d:be:18:e9:39:1c:51:75: 4f:2d:96:f4:21:7e:96:7a:a7:01:95:30:c2:f8:4a: 58:60:c4:a4:0d:07:7b:1b:76:17:3a:fe:c6:4c:ea: d0:e1:2d:35:53:8b:f5:0f:e2:76:35:42:9c:a7:bb: 0c:d6:21:4b:c0:3a:0f:93:99:77:f6:b6:fd:a5:96: e4:8d:53:46:a9:85:ab:f6:95:92:e4:31:f7:12:7e: 9d:64:55:5e:4f:c6:f9:8b:d4:af:0c:2f:39:db:36: b9:7b:ca:74:8e:98:17:08:1c:fe:df:b8:4f:c2:3e: d2:bf:94:03:f1:f1:3f:8b:b9:20:91:f6:19:29:eb: 8a:c9:33:5d:85:95:28:fe:08:ae:0a:16:06:88:56: 47:63:f5:79:c2:32:6e:ff:c1:e0:61:cf:18:ea:37: 8d:55:58:1e:73:fd:b8:4a:50:5a:85:e2:5d:12:5f: d7:ff:e3:89:0b:60:5c:40:0a:68:6f:cb:48:a5:c3: f0:91:d8:50:74:88:1b:5b:5f:6c:5f:15:cc:8f:9a: 0a:fd:d8:44:49:ec:72:09:19:34:e6:22:fb:bb:47: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:83:F0:BF:64:7C:A4:74:33:43:53:09:AA:7B:DE:38:72:4B:7B:5A X509v3 Authority Key Identifier: keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:35:c4:4c:05:d0:1b:d7:08:80:f6:ac:93:d7:b1:bc:c6:65: 12:41:fe:ae:03:e2:e1:6b:9b:3b:7d:98:c4:de:b7:6e:78:00: 95:ba:dc:1b:f6:4c:8b:47:8e:65:93:bd:77:d5:25:e4:4f:27: a2:7d:1b:9b:b3:85:91:87:b7:e2:de:77:f7:4f:fe:10:5a:e6: 4a:ab:1c:d6:2e:db:c1:b2:e3:e0:2b:c4:fe:6c:e6:f2:15:81: d9:42:1c:9e:1e:d9:b1:9e:0c:f5:5c:9d:f3:e7:9f:18:af:94: 1a:36:ce:40:23:24:a9:d4:00:f0:98:57:57:cc:f8:61:c7:c3: ca:bc:f8:2f:95:4b:69:4c:9f:ee:e6:8b:b0:5e:ff:ce:45:d4: 9b:b3:5f:22:bc:66:97:8c:4c:72:ef:ee:ab:48:24:5a:ea:5c: cf:85:38:47:8c:0f:e7:f3:cc:6d:f1:01:8c:81:b7:84:9e:f0: b4:ce:5c:e9:77:91:cc:54:47:77:9e:9d:72:07:31:71:32:95: ed:79:e3:fa:07:e7:60:91:73:d7:71:e4:35:46:e3:7e:f7:33: f7:e6:67:b1:51:24:a6:e8:26:de:42:f8:7e:c2:2c:0c:78:49: 22:c8:c1:47:c0:1a:a6:dd:e6:d1:38:7f:ed:00:c7:85:e3:9d: a1:e5:c4:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZhz4kAiNDuGqh/t29C5smPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk3N2Y4NTRjNjNkYzlmOTdhMThiZTdiMTMwMDIxMjFh NWQzODQwHhcNMjUwODA0MDcwMTAzWhcNMjUwODA1MDcwMTAzWjAzMTEwLwYDVQQD Eyg4ZDgzZjBiZjY0N2NhNDc0MzM0MzUzMDlhYTdiZGUzODcyNGI3YjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnBlbKl29JRR+zk+6kcViQY2hErZ JTSWCIcY/IcyTq8QHgnhXb4Y6TkcUXVPLZb0IX6WeqcBlTDC+EpYYMSkDQd7G3YX Ov7GTOrQ4S01U4v1D+J2NUKcp7sM1iFLwDoPk5l39rb9pZbkjVNGqYWr9pWS5DH3 En6dZFVeT8b5i9SvDC852za5e8p0jpgXCBz+37hPwj7Sv5QD8fE/i7kgkfYZKeuK yTNdhZUo/giuChYGiFZHY/V5wjJu/8HgYc8Y6jeNVVgec/24SlBaheJdEl/X/+OJ C2BcQApob8tIpcPwkdhQdIgbW19sXxXMj5oK/dhESexyCRk05iL7u0cJAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2D8L9kfKR0M0NTCap73jhyS3taMB8GA1UdIwQY MBaAFGypd/hUxj3J+XoYvnsTACEhpdOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQt ZDZhNTk1MGNhZGYyLzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wOWNjYjQtMjQ4My00YmE3LTk2MzQtZDZhNTk1MGNhZGYy LzEvYktsMy1GVEdQY241ZWhpLWV4TUFJU0dsMDRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjXETAXQ G9cIgPask9exvMZlEkH+rgPi4WubO32YxN63bngAlbrcG/ZMi0eOZZO9d9Ul5E8n on0bm7OFkYe34t5390/+EFrmSqsc1i7bwbLj4CvE/mzm8hWB2UIcnh7ZsZ4M9Vyd 8+efGK+UGjbOQCMkqdQA8JhXV8z4YcfDyrz4L5VLaUyf7uaLsF7/zkXUm7NfIrxm l4xMcu/uq0gkWupcz4U4R4wP5/PMbfEBjIG3hJ7wtM5c6XeRzFRHd56dcgcxcTKV 7Xnj+gfnYJFz13HkNUbjfvcz9+ZnsVEkpugm3kL4fsIsDHhJIsjBR8Aapt3m0Th/ 7QDHheOdoeXEog== -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:24 2025 by rpki-client